4 matches found
CVE-2021-35214
The vulnerability in SolarWinds Pingdom can be described as a failure to invalidate user session upon password or email address change. When running multiple active sessions in separate browser windows, it was observed a password or email address change could be changed without terminating the us...
PT-2021-11092
Name of the Vulnerable Software and Affected Versions: Quadbase ExpressDashboard EDAB version 7 Update 9 Description: An issue allows Cross-Site Request Forgery CSRF, which is an attack that tricks an authenticated user into performing unintended actions. In this case, an attacker may be able to...
PT-2020-19978
Name of the Vulnerable Software and Affected Versions Revive Adserver versions prior to 5.0.5 Description A security restriction bypass issue has been found, allowing an attacker with access to the admin user interface to change the email address or password of the currently logged-in user withou...
cPanel Pro 11.32.5.11 Cross Site Request Forgery
============================================================================== Vulnerable Software: cPanel version : 11.32.5 build 11-11.32.5.11 cPanel Pro Vulnerability: CSRF Vendor: cpanel.net ==============================================================================...